AI agent permissions: a self-hoster's hardening guide

dev.to Docker2026-11-03 15:000 views

Find every credential your self-hosted AI agent holds, cut it down, run it as its own user, gate destructive actions, and keep logs out of its reach.

Originally published on SelfHost Pilot - practical self-hosted software and private AI, tested on a real server.

"Use a strong password" is useless advice without a definition of strong. The definition that actually holds up is entro

Most MCP demos read files or query databases. Those tools are cheap and reversible. The interesting design problem start

Switching AI character chat apps is common: features change, free tiers shrink, rules shift, or another app simply fits

TL;DR: For an edtech contact form that needs to place a student or teacher message in the right support queue, choose th

There's something I've always found strange about automated testing. Teams spend enormous amounts of time trying to make

Your agent is not a user of your API. It's a stranger with a keyboard — and right now, most integrations hand it the key

AI agent permissions: a self-hoster&#x27;s hardening guide